Manually alter administrator password and forums

[ostryweb.cz]

I just had a same problem - maybe I did some messing with the salt yesterday, and today my login fails and my "forgot password" form didn't send any email (I will check this later).

My server permissions also do not let you do anything in the users folder (I tried even the web-ftp interface, but without success). I think this is generally correct, however, when you need to hack the user files, it's a bit of a problem.

So my solution was to hack the reset password script so it doesn't send email, but just prints the email text to the screen:

in admin/resetpassword.php
add these lines:

Code:

print_r($message);
die();

right before this (in my version it is line 66)

Code:

$status = sendmail($EMAIL,$subject,$message);

Go to admin login page, follow the "forgot password" link, enter your user name and after pressing the send button, you will get the email text. Now you can login with the new password.

It's a dirty routine, but maybe it's even easier then creating the new hash.. Also probably the only way if your server doesn't let you mess with the users files..

**don't forget to turn the changes in resetpassword.php back afterwards